HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of May 15, 2015.
- Organization as reported
- Duke LifePoint Conemaugh Memorial Medical Center, PA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Desktop Computer
- Submission date
- May 15, 2015
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14799, row:5938)
- Archived copy
- Held in the private archive (provenance)
An employee of the covered entity’s (CE) business associate (BA), Medical Management, LLC (“MML”), disclosed the demographic information of 1,551 of the CE’s patients to outside parties. The protected health information (PHI) involved in the breach included names, dates of birth, and social security numbers. Following the breach, the CE assisted the BA in responding to the breach and notifying affected individuals. Additionally, OCR reviewed the CE’s risk analysis to ensure compliance with the Security Rule